summaryrefslogtreecommitdiffstats
path: root/net/netfilter/nf_tables_core.c
diff options
context:
space:
mode:
authorFlorian Westphal2016-10-18 17:35:18 +0200
committerPablo Neira Ayuso2016-10-26 16:35:15 +0200
commit5efa0fc6d7f7930b18801f07cefae8eeacd6ac02 (patch)
tree93cdc24ad4bafc66ccc4648cfa9fa08f518fd6eb /net/netfilter/nf_tables_core.c
parentnetfilter: nfnetlink_log: Use GFP_NOWARN for skb allocation (diff)
downloadkernel-qcow2-linux-5efa0fc6d7f7930b18801f07cefae8eeacd6ac02.tar.gz
kernel-qcow2-linux-5efa0fc6d7f7930b18801f07cefae8eeacd6ac02.tar.xz
kernel-qcow2-linux-5efa0fc6d7f7930b18801f07cefae8eeacd6ac02.zip
netfilter: nf_tables: allow expressions to return STOLEN
Currently not supported, we'd oops as skb was (or is) free'd elsewhere. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_tables_core.c')
-rw-r--r--net/netfilter/nf_tables_core.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/netfilter/nf_tables_core.c b/net/netfilter/nf_tables_core.c
index 0dd5c695482f..70de32a6d5c0 100644
--- a/net/netfilter/nf_tables_core.c
+++ b/net/netfilter/nf_tables_core.c
@@ -178,6 +178,7 @@ next_rule:
case NF_ACCEPT:
case NF_DROP:
case NF_QUEUE:
+ case NF_STOLEN:
nft_trace_packet(&info, chain, rule,
rulenum, NFT_TRACETYPE_RULE);
return regs.verdict.code;